CVE-2025-59366

CriticalCVSS 9.2

Published: 25/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

15.76%

97th percentile - higher than 97% of all known CVEs

Summary

In AiCloud, an authentication-bypass vulnerability exists, triggered by an unintended side effect of the Samba functionality, potentially allowing execution of specific functions without proper authorization.

Risk Assessment

An attacker can access functions without authentication, potentially leading to unauthorized actions and security compromise.

Recommendation

Apply security updates provided by ASUS and review Samba configuration.

Other vulnerabilities in AiCloud

CVE-2025-59368Medium
An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger it by sending a crafted request, potentially impacting device availability.

Original NVD description (English source)

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS